DllMain
EditAuditInfo
EditOwnerInfo
EditPermissionInfo
FMExtensionProcW
SedDiscretionaryAclEditor
SedSystemAclEditor
SedTakeOwnership
Behavioral task
behavioral1
Sample
JaffaCakes118_41839af86142c84139c54c4049cf8058.dll
Resource
win7-20240708-en
Target
JaffaCakes118_41839af86142c84139c54c4049cf8058
Size
153KB
MD5
41839af86142c84139c54c4049cf8058
SHA1
efc84f76b7cb3629a1bdf05e5b7a69242c69bdce
SHA256
a803120e55dedfef6f141607e8ec051c4ddbcb50bec5faa24d1701ff264201c7
SHA512
4ac75e23e82d0b876c05bcd50a89f556d1e17f8affc50f165b5835d84a1ded25ed13a2f534456ec8f315ddbabaf12d445f4d7574e52bbfca51d31d7744615885
SSDEEP
3072:43l3uOHOW9VO02l6FC4FTMJ494YhihST31TBfts7Slfs9A9j:43lBuWThk6XihST31TBls2lH
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
JaffaCakes118_41839af86142c84139c54c4049cf8058 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RegOpenKeyExW
LocalFree
LocalSize
LocalAlloc
lstrlenA
Sleep
CloseHandle
LocalReAlloc
GetLastError
GetCurrentProcess
lstrcpyA
lstrcmpiA
GetTickCount
lstrcatA
GetLocalTime
GlobalUnlock
GlobalLock
GlobalSize
HeapFree
GetProcessHeap
MapViewOfFile
CreateFileMappingA
GetShortPathNameA
HeapAlloc
InterlockedDecrement
InterlockedIncrement
GetSystemInfo
GetVersionExA
GetProcessTimes
GlobalMemoryStatusEx
FreeLibrary
GlobalFree
GlobalAlloc
GetProcAddress
GetModuleHandleA
GetTempFileNameA
GetSystemDirectoryA
DeleteFileA
RemoveDirectoryA
ExitThread
GetModuleFileNameA
IsBadReadPtr
IsBadStringPtrW
InitializeCriticalSection
VirtualFree
LeaveCriticalSection
VirtualAlloc
WideCharToMultiByte
InterlockedExchange
SetUnhandledExceptionFilter
FormatMessageA
VirtualQuery
IsBadWritePtr
GetCurrentThreadId
MultiByteToWideChar
lstrcmpA
GetPrivateProfileStringA
GetPrivateProfileSectionNamesA
ExpandEnvironmentStringsA
GetCurrentProcessId
VirtualProtect
SetEnvironmentVariableA
GetTempPathA
GetLongPathNameA
ExitProcess
GetExitCodeProcess
RaiseException
LoadLibraryA
MessageBoxA
GetWindowRect
ShowWindow
GetWindow
GetClassNameA
GetCursorInfo
DestroyCursor
LoadCursorA
wvsprintfA
DestroyWindow
CreateWindowExA
wsprintfA
CloseWindowStation
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
_strupr
_memicmp
_strlwr
_wcsicmp
realloc
__CxxFrameHandler
??3@YAXPAX@Z
??2@YAPAXI@Z
_except_handler3
strncpy
free
malloc
atoi
strchr
rand
srand
_ftol
strstr
wcstombs
memmove
ceil
wcslen
wcsrchr
_beginthreadex
strrchr
strncat
_CxxThrowException
DllMain
EditAuditInfo
EditOwnerInfo
EditPermissionInfo
FMExtensionProcW
SedDiscretionaryAclEditor
SedSystemAclEditor
SedTakeOwnership
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ